Your incident handling manager detects a virus attack in the network of your company. You develop a signature based on the characteristics of the detected virus.
Which of the following phases in the incident handling process will utilize the signature to resolve this incident?

• A.Eradication
• B.Containment
• C.Recovery
• D.Identification

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a countermeasure to prevent unauthorized database access from web applications?

• A.Removing all stored procedures
• B.Library control
• C.Input sanitization
• D.Session encryption

Comment: *

Name: *

Email: *

Verification: *

Scenario: The new CISO was informed of all the Information Security projects that the section has in progress. Two projects are over a year behind schedule and way over budget.
Which of the following will be most helpful for getting an Information Security project that is behind schedule back on schedule?

• A.Involve internal audit
• B.More frequent project milestone meetings
• C.More training of staff members
• D.Upper management support

Comment: *

Name: *

Email: *

Verification: *

In order for a CISO to have true situational awareness there is a need to deploy technology that can give a real-time view of security events across the enterprise.
Which tool selection represents the BEST choice to achieve situational awareness?

• A.Intrusion Detection System (IDS), firewall, switch, syslog
• B.Security Incident Event Management (SIEM), IDS, router, syslog
• C.VMware, router, switch, firewall, syslog, vulnerability management system (VMS)
• D.SIEM, IDS, firewall, VMSSIEM, IDS, firewall, VMS

Comment: *

Name: *

Email: *

Verification: *

A recent audit has identified a few control exceptions and is recommending the implementation of technology and processes to address the finding. Which of the following is the MOST likely reason for the organization to reject the implementation of the recommended technology and processes?

• A.The risk tolerance of the organization permits this risk
• B.The auditors have not followed proper auditing processes
• C.The CIO of the organization disagrees with the finding
• D.The organization has purchased cyber insurance

Comment: *

Name: *

Email: *

Verification: *